Browsing All posts tagged under »security«

$_GET can get you in trouble

August 28, 2008

Comments

Consider a scenario that a file is requested and you have to display content of the requested file in the browser. Look at the following code example: <?php // File Name: print_file_contents.php $file = $_GET['filename']; //get the file name from query string print file_get_contents($file); //print the contents of the file ?> If you have worked with PHP [...]

Read On...